Splunk Administrator / Developer - Onsite in Japan

• Install, configure, upgrade, and maintain Splunk Enterprise and/or Splunk Cloud, including indexers, search heads, forwarders, and deployment servers

• Manage indexer clustering, search head clustering, and capacity planning

• Onboard new data sources (syslog, application logs, cloud, network, and security devices) using Universal/Heavy Forwarders, HEC, and apps/add-ons

• Develop and optimize SPL searches, dashboards, reports, alerts, and data models

• Build custom apps, add-ons, and integrations using Splunk SDKs, REST APIs, and scripting (Python, Bash, JavaScript)

• Configure parsing, field extractions, props/transforms, and data normalization (CIM)

• Monitor platform health, tune performance, and troubleshoot indexing and search issues

• Manage users, roles, authentication (LDAP/SAML/SSO), and access controls

• Support security use cases, such as Splunk Enterprise Security (ES) correlation searches, if applicable

• Document configurations, standards, and runbooks, and train internal users on Splunk best practices

• 4 plus years of hands-on experience administering and/or developing on Splunk

• At least one Splunk certification, such as:

• Splunk Core Certified Power User

• Splunk Enterprise Certified Admin

• Splunk Cloud Certified Admin

• Splunk Certified Developer

• Splunk Enterprise Certified Architect

• Splunk Enterprise Security Certified Admin

• Strong SPL skills, including complex searches, joins, lookups, and statistical commands

• Experience with Linux/Unix and/or Windows server administration

• Working knowledge of networking, log formats, and scripting (Python, Shell, or PowerShell)

• Strong troubleshooting and communication skills in English

• Willingness to work onsite in Japan and, if relocating, to relocate at the company’s schedule

Pay: From ₹1,000,000.00 per year

Benefits:

• Flexible schedule
• Health insurance
• Work from home

Work Location: In person